From a8bd9b8c72723142f90681a1a16b9943a45d8eb7 Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Fri, 15 Oct 2021 11:12:06 +1100
Subject: [PATCH] hdb: update HDB_F_SYNTHETIC_OK description

Note that HDB_F_SYNTHETIC_OK is also used for GSS-API pre-authentication as
well as PKINIT.

Fixes: #812
---
 lib/hdb/hdb.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/hdb/hdb.h b/lib/hdb/hdb.h
index 808c4582a..539312b01 100644
--- a/lib/hdb/hdb.h
+++ b/lib/hdb/hdb.h
@@ -70,7 +70,7 @@ enum hdb_lockop{ HDB_RLOCK, HDB_WLOCK };
 #define HDB_F_FOR_TGS_REQ	8192	/* fetch is for a TGS REQ */
 #define HDB_F_PRECHECK		16384	/* check that the operation would succeed */
 #define HDB_F_DELAY_NEW_KEYS	32768	/* apply [hdb] new_service_key_delay */
-#define HDB_F_SYNTHETIC_OK	65536	/* synthetic principal for PKINIT OK */
+#define HDB_F_SYNTHETIC_OK	65536	/* synthetic principal for PKINIT or GSS preauth OK */
 #define HDB_F_GET_FAST_COOKIE  131072	/* fetch the FX-COOKIE key (not a normal principal) */
 
 /* hdb_capability_flags */